In security, it’s trendy to dunk on vendors and romanticize building in-house. But in most enterprises, buying the boring, supported tool isn’t selling out, it's the smart choice.

Security questionnaires are a soul-crushing bureaucratic charade that wastes everyone's time, kills business momentum, and miraculously manages to make security worse in the process.

The ultimate rant against compliance theatre and checkmarkism.

Reviewing the Data Breach Investigation Report for a source of credible data about the real cyber threats we must worry about.